CVE-2025-7914: Tenda AC6 httpd setparentcontrolinfo buffer overflow
Published Jul 21, 2025
·Updated
A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is the function setparentcontrolinfo of the component httpd. The manipulation leads to buffer overflow. The attack can be launched remotely.
Affected Software
3 affected components
Tenda AC6
All of the following
Tenda Ac6 Firmware=15.03.06.50
Tenda AC6=2.0
Event History
Jul 21, 2025
CVE Published
via MITRE·12:02 AM
Data Sourced
via MITRE·12:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 16, 58473
Event
via NVD·11:33 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-7914?
CVE-2025-7914 is classified as critical due to its potential for remote exploitation.
2
How do I fix CVE-2025-7914?
To mitigate CVE-2025-7914, update the Tenda AC6 to the latest version that resolves this vulnerability.
3
What component is affected by CVE-2025-7914?
CVE-2025-7914 affects the setparentcontrolinfo function within the httpd component.
4
What is the nature of the vulnerability in CVE-2025-7914?
The vulnerability in CVE-2025-7914 leads to a buffer overflow, which can be exploited remotely.
5
Can CVE-2025-7914 be exploited remotely?
Yes, CVE-2025-7914 can be exploited remotely, allowing attackers to launch attacks from outside the network.